$ rpki-client -vvf repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft File: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft (raw, json) Hash identifier: 27ZXQ4c1/Zb0i6LfwW2dA5Lu+7JY73Go5mDCy/d+am0= Subject key identifier: F4:CC:CB:7E:95:38:38:A9:A9:D9:B0:9A:1B:09:CF:28:48:43:83:5D Authority key identifier: 84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F Certificate issuer: /CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F Certificate serial: 2D5D72A8A3386D569105AF71ED2606980C2F8546 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft Manifest number: 022E Signing time: Thu 16 Apr 2026 22:02:21 +0000 Manifest this update: Thu 16 Apr 2026 21:57:20 +0000 Manifest next update: Sun 19 Apr 2026 23:58:20 +0000 Files and hashes: 1: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl (hash: 95mstuaLOhAp1A88yGhDwPplyL2N4kA5qwi58Kwvryc=) 2: 3130332e362e3136362e302f32342d3234203d3e20313439393335.roa (hash: qsAO4cOsO4ax3oPbTen8Sd837s3C+50yjyG9ueyoUI8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 23:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:5d:72:a8:a3:38:6d:56:91:05:af:71:ed:26:06:98:0c:2f:85:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F Validity Not Before: Apr 16 21:57:20 2026 GMT Not After : Apr 19 23:58:20 2026 GMT Subject: CN=F4CCCB7E953838A9A9D9B09A1B09CF284843835D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9c:7b:d8:bc:40:d2:57:9e:ce:84:f3:e9:66: 08:33:d2:8f:65:d8:a8:57:69:b0:11:e5:90:a6:82: 79:9e:e5:9e:51:cf:01:ce:e4:30:b3:24:8b:9c:20: 77:92:47:25:f5:dc:a6:ae:86:42:4d:6d:09:c1:7f: 82:6f:05:2f:a9:7c:84:40:91:20:20:a4:dd:82:21: 6d:88:06:75:d9:7e:b5:71:d2:c7:2f:b1:78:17:38: 17:94:eb:31:76:17:8d:a4:2c:bf:81:42:f8:b4:c3: 71:f1:b2:49:45:eb:e5:b5:64:7c:92:c9:c4:45:17: 0f:f9:0a:c6:95:44:a0:fe:f0:08:e3:22:58:b5:dc: 03:d8:8c:30:ca:d7:3c:8b:95:17:7e:42:e9:52:44: ae:46:de:e4:dc:65:05:c9:2c:21:42:9d:09:53:b9: 86:3e:1b:44:5a:ab:d9:05:89:5d:6f:f3:34:e9:74: 55:d7:43:74:5d:db:d6:8b:5d:a1:96:2f:b3:5d:35: 6a:a2:1b:ee:2e:11:cf:e9:7c:a0:cb:3b:a6:6d:53: 06:2b:cd:33:f1:a3:66:1c:4e:69:2f:e5:87:08:bd: a2:b8:22:55:32:7b:25:77:29:21:b9:e3:33:24:31: 59:48:b1:1a:c8:50:24:a0:f6:41:94:f7:2d:ec:c0: 70:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:CC:CB:7E:95:38:38:A9:A9:D9:B0:9A:1B:09:CF:28:48:43:83:5D X509v3 Authority Key Identifier: keyid:84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:2b:0c:49:63:fb:94:02:9f:3b:15:23:4f:2d:38:92:47:e5: 28:54:92:42:3c:4c:b9:3b:d0:ee:9a:30:88:15:4d:a8:2c:1f: d4:05:3e:e2:47:75:a2:78:1c:37:94:17:9a:88:c6:be:c1:5f: 73:4a:77:75:b7:94:5c:bd:b4:e2:aa:a9:8d:41:a6:9b:9f:a9: 35:4c:b2:9f:cc:7a:9e:c1:e2:3c:54:88:c2:d0:fe:10:b9:02: 63:4d:e6:1e:27:cf:fc:ad:bb:a1:3b:5b:98:81:05:14:97:73: 29:f8:5f:ee:f7:7a:63:d7:92:e4:08:ab:bc:5f:bd:50:3f:c6: cc:94:a7:4a:7d:8e:1a:60:eb:65:25:5f:1f:f7:16:3c:0c:07: fe:80:7b:81:36:4e:76:5b:fa:20:88:4f:5a:57:75:7a:fe:0a: 83:9f:15:c1:c4:15:34:4a:83:4d:c0:cd:14:5e:9a:36:79:d1: ee:a7:18:08:84:47:0d:c0:5e:0c:5b:75:66:3e:21:1e:9f:31: 3f:6f:63:b2:61:bc:d9:3c:44:b5:7a:e9:6b:ff:89:c8:4c:48: af:75:63:e8:98:09:88:eb:45:91:17:8a:0c:4c:71:c3:fd:49: e3:19:9d:8d:c7:d5:a6:1f:a2:34:d9:2f:06:71:a6:fb:70:40: e1:15:87:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULV1yqKM4bVaRBa9x7SYGmAwvhUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFFQzgw RDZFQUI0RjAeFw0yNjA0MTYyMTU3MjBaFw0yNjA0MTkyMzU4MjBaMDMxMTAvBgNV BAMTKEY0Q0NDQjdFOTUzODM4QTlBOUQ5QjA5QTFCMDlDRjI4NDg0MzgzNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9nHvYvEDSV57OhPPpZggz0o9l 2KhXabAR5ZCmgnme5Z5RzwHO5DCzJIucIHeSRyX13KauhkJNbQnBf4JvBS+pfIRA kSAgpN2CIW2IBnXZfrVx0scvsXgXOBeU6zF2F42kLL+BQvi0w3HxsklF6+W1ZHyS ycRFFw/5CsaVRKD+8AjjIli13APYjDDK1zyLlRd+QulSRK5G3uTcZQXJLCFCnQlT uYY+G0Raq9kFiV1v8zTpdFXXQ3Rd29aLXaGWL7NdNWqiG+4uEc/pfKDLO6ZtUwYr zTPxo2YcTmkv5YcIvaK4IlUyeyV3KSG54zMkMVlIsRrIUCSg9kGU9y3swHC9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9MzLfpU4OKmp2bCaGwnPKEhDg10wHwYDVR0j BBgwFoAUhJ6eJApr9EI7Hn0iBdQeyA1uq08wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWViNDVkZS01MTgzLTRhM2EtYjA2ZC04YmI4ZDQ1MDZiMDYvMC84NDlFOUUyNDBB NkJGNDQyM0IxRTdEMjIwNUQ0MUVDODBENkVBQjRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFFQzgwRDZF QUI0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVlYjQ1ZGUtNTE4My00YTNhLWIw NmQtOGJiOGQ0NTA2YjA2LzAvODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFF QzgwRDZFQUI0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgrDElj+5QCnzsVI08tOJJH5ShUkkI8TLk7 0O6aMIgVTagsH9QFPuJHdaJ4HDeUF5qIxr7BX3NKd3W3lFy9tOKqqY1BppufqTVM sp/Mep7B4jxUiMLQ/hC5AmNN5h4nz/ytu6E7W5iBBRSXcyn4X+73emPXkuQIq7xf vVA/xsyUp0p9jhpg62UlXx/3FjwMB/6Ae4E2TnZb+iCIT1pXdXr+CoOfFcHEFTRK g03AzRRemjZ50e6nGAiERw3AXgxbdWY+IR6fMT9vY7JhvNk8RLV66Wv/ichMSK91 Y+iYCYjrRZEXigxMccP9SeMZnY3H1aYfojTZLwZxpvtwQOEVh08= -----END CERTIFICATE-----Generated at Fri Apr 17 11:44:57 2026 by rpki-client